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EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than 
the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Omar M. Wadhwa on 6/23/10. 

The application has been amended as follows: 

1 . (CURRENTLY AMENDED) A method for graphically presenting characteristics of data 
traffic on a distributed computer network, comprising: 

monitoring traffic on said network; 

storing records relating to said traffic in one or more network information files; 
selecting a characteristic of said traffic for display; 

obtaining a plurality of values of said characteristic of said traffic from said one or 
more network information files for a selected plurality of time intervals within a larger time 
interval; and 

displaying a map of a network topology of said network; 

presenting said characteristic by playing a rapid succession of graphical images of 
said map of said network topology , each graphical image representing said network as nodes 
connected by lines overlaid on said map , said nodes each representing components in said 
network, said lines representing traffic flow between said components, each graphical image 
graphically representing the value of said characteristic at a particular selected time interval 
of said plurality of time intervals within the larger time interval with a property of at least 
one line of said lines that connect nodes , wherein said property includes a density of said at 
least one line . 
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wherein a change in said property density of said at least one line that connects nodes 
in successive graphical images of said map of the network topology indicates a change in the 
value of said characteristic of said traffic between said components . 

2-3. (CANCELLED) 

4. (CURRENTLY AMENDED) The method as in claim 1 . further comprising : w herein said 
density of said at least one line is using-a width of said at least one line as said property, a 
change in said width indicating a change in the value of said characteristic of said traffic . 

5. (CURRENTLY AMENDED) The method as in claim 1, further comprising: 

using a color of said at least one line to further define as-said property, a change in 
said color further indicating a change in the value of said characteristic of said traffic. 

6. (CURRENTLY AMENDED) The method as in claim 1, further comprising: 

using an arrow drawn on said at least one line to further defmea s said property, a 
change in said arrow further indicating a change in the value of said characteristic of said 
traffic. 

7-9. (CANCELLED) 

10. (PREVIOUSLY PRESENTED) The method as in claim 1, further comprising: 

receiving a selection of a filtering expression in a graphical user interface; 
selecting records from said network information files; and 
executing said filtering expression on the selected records. 

11. (PREVIOUSLY PRESENTED) The method as in claim 10, further comprising: 

calculating parameters that are associated with the records selected from said network 
information files and storing the parameters in a local file. 

12. (CANCELLED) 

13. (PREVIOUSLY PRESENTED) The method as in claim 1, further comprising: 

using a filtering program to select records in said network information files that meet 
selected filtering criteria. 
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14. (PREVIOUSLY PRESENTED) The method as in claim 13, further comprising: 

compiling the selected records from said network information files, each compiled 
record meeting at least one selected filtering criterion. 

15. (ORIGINAL) The method as in claim 14, further comprising: 

calculating data that represent the compiled records, and storing the data in a file. 

16. (CANCELLED) 

17. (PREVIOUSLY PRESENTED) The method of claim 14, further comprising: 

including a time interval criterion which indicates how often to compile and package 
information from the network information files. 

18. (PREVIOUSLY PRESENTED) The method of claim 1, further comprising: 

defining the larger time interval with a starting time and an ending time specified 
within a filtering criteria. 

19. (CURRENTLY AMENDED) A data visualization apparatus for graphically presenting 
characteristics of data traffic on a distributed computer network, comprising: 

means for monitoring traffic on said network; 

means for storing records relating to said traffic; 

means for selecting characteristics of said traffic for display; 

means for obtaining a plurality of values of said characteristics of said traffic from 
said means for storing for a selected plurality of time intervals within a larger time interval; 
and 

means for displaying a map of a network topology of said network; 

means for presenting said characteristics by playing a rapid succession of graphical 
images of said map of said network topology , each graphical image representing said 
network as nodes connected by lines overlaid on said map , said nodes each representing 
components in said network, said lines representing traffic flow between said components, 
each graphical image graphically representing the value of said characteristics at a particular 
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time interval of said plurality of time intervals within the larger time interval with a property 
of at least one line of said lines that connects nodes , wherein said property includes a density 
of said at least one line , 

wherein a change in said property density of said at least one line that connects nodes 
in successive graphical images of said map of said network topology indicates a change in 
the value of said characteristics of said traffic between said components . 

20-21. (CANCELLED) 

22. (CURRENTLY AMENDED) The apparatus as in claim 19, further comprising: 
mcans wherein said density is for using a width of said at least one line as said property, a 
change in said width indicating a change in the value of said characteristics of said traffic .23. 
(CURRENTLY AMENDED) The apparatus as in claim 19, further comprising: 

means for a using a color of said at least one line to further define as-said property, a 
change in said color further indicating a change in the value of said characteristics of said 
traffic. 

24. (CURRENTLY AMENDED) The apparatus as in claim 19, further comprising: 

means for using an arrow drawn on said at least one line to further define as-said 
property, a change in said arrow further indicating a change in the value of said 
characteristics of said traffic. 

25-27. (CANCELLED) 

28. (PREVIOUSLY PRESENTED) The apparatus as in claim 19, further comprising: 

means for receiving a selection of a filtering expression; 
means for selecting records from network information files; and 
means for executing said filtering expression on the selected records. 

29. (PREVIOUSLY PRESENTED) The apparatus as in claim 28, further comprising: 

means for calculating parameters that are associated with the records selected from 
said network information files and storing the parameters in a local file. 
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30. (CANCELLED) 

31. (ORIGINAL) The apparatus as in claim 19, further comprising: 

means for using a filtering program to select records in network information files that 
meet selected filtering criteria. 

32. (PREVIOUSLY PRESENTED) The apparatus as in claim 31, further comprising: 

means for compiling the selected records from said network information files, each 
compiled record meeting at least one selected filtering criterion. 

33. (ORIGINAL) The apparatus as in claim 32, further comprising: 

means for calculating data that represent the compiled records, and storing the data in 

a file. 

34. (CANCELLED) 

35. (PREVIOUSLY PRESENTED) The apparatus as in claim 32, further comprising: 

means for including a time interval criterion which indicates how often to compile 
and package information from the network information files. 

36. (PREVIOUSLY PRESENTED) The apparatus as in claim 19, further comprising: 

means for defining the larger time interval with a starting time and an ending time 
specified within a filtering criteria. 

37. (CURRENTLY AMENDED) A data visualization apparatus for graphically presenting 
characteristics of data traffic on a distributed computer network, comprising: 

a computer to monitor traffic on said network and store storing r ecords relating to 
said traffic; 

a graphical user interface to select a characteristic of said traffic for display; 

a reporting system executing on said computer to obtain a plurality of values of said 
characteristic of said traffic from said stored records for a selected plurality of time intervals 
within a larger time interval; and 
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a visualization system executing on said computer to display a map of a network 
topology of said network and present said characteristic by playing a rapid succession of 
graphical images of said map of said network topology , each graphical image representing 
said network as nodes connected by lines overlaid on said map , said nodes each representing 
components in said network, said lines representing traffic flow between said components, 
each graphical image graphically representing the value of said characteristic at a particular 
selected time interval of said plurality of time intervals within the larger time interval with a 
property of at least one line of said lines that connect nodes , wherein said property includes a 
density of said at least one line , 

wherein a change in said property density of said at least one line that connects nodes 
in successive graphical images of said map of the network topology indicates a change in the 
value of said characteristic of said traffic between said components . 

38-39. (CANCELLED) 

40. (CURRENTLY AMENDED) The apparatus as in claim 37 , further 

comprising: instructions to e x e cut e in said comput e r to use wherein the density of said at 
least one line is a width of said at least one line as said prop e rty, a chang e in said width 
indicating a change in the value of said characteristic of said traffic . 

41. (CURRENTLY AMENDED) The apparatus as in claim 37, further comprising: 

instructions to execute in said computer to use a color of said at least one line to 
further define as-said property, a change in said color further indicating a change in the value 
of said characteristic of said traffic. 

42. (CURRENTLY AMENDED) The apparatus as in claim 37, further comprising: 

instructions to execute in said computer to use an arrow drawn on said at least one 
line a sto further define said property, a change in said arrow further indicating a change in 
the value of said characteristic of said traffic. 
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43-45. (CANCELLED) 

46. (PREVIOUSLY PRESENTED) The apparatus as in claim 37, further comprising: 

instructions to execute in said computer to receive a selection of a filtering expression in 
a graphical user interface; 

instructions to execute in said computer to select records from network information files; 

and 

instructions to execute in said computer to execute said filtering expression on the 
selected records. 

47. (PREVIOUSLY PRESENTED) The apparatus as in claim 46, further comprising: 

instructions to execute in said computer to calculate parameters that are associated with 
the records selected from said network information files and storing the parameters in a local file. 

48. (CANCELLED) 

49. (ORIGINAL) The apparatus as in claim 37, further comprising: 

instructions to execute in said computer to use a filtering program to select records in 
network information files that meet selected filtering criteria. 

50. (PREVIOUSLY PRESENTED) The apparatus as in claim 49, further comprising: 

instructions to execute in said computer to compile the selected records from network 
information files each compiled record meeting at least one selected filtering criterion. 

51. (ORIGINAL) The apparatus as in claim 50, further comprising: 

instructions to execute in said computer to calculate data that represent the compiled 
records, and storing the data in a file. 

52. (CANCELLED) 

53. (PREVIOUSLY PRESENTED) The apparatus as in claim 50, further comprising: 

instructions to execute in said computer to include a time interval criterion which 
indicates how often to compile and package information from the network information files. 
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54. (PREVIOUSLY PRESENTED) The apparatus as in claim 37, further comprising: 

instructions to execute in said computer to define the larger time interval with a starting 
time and an ending time specified within a filtering criteria. 

55-56. (CANCELLED) 

57. (CURRENTLY AMENDED) A method comprising: 

monitoring data traffic in a distributed computer network; 

storing records relating to the data traffic in one or more network information files; 
selecting a characteristic of the data traffic for display; 

extracting data from the network information files related to the selected characteristic for 
a plurality of time intervals within a larger time interval; and 

for each time interval within the larger time interval, generating a frame that visually 
depicts a map of the network topology of the distributed computer network, with nodes of the 
map representing network components, the nodes interconnected by lines overlaid on the frame 
that represent traffic flow between the network components, the frame , that visually depicts the 
map of the network topology, to visually indicate a value of the characteristic of data traffic 
between two network components with the visual appearance of a line interconnecting the two 
nodes representing those two network components; and 

playing a rapid succession of frames , that visually depict the map of the network 
topology, to a user to illustrate changes in the characteristic of the data traffic over the larger 
time interval, wherein changes in the visual appearance a density of the ajine interconnecting the 
two nodes in successive frames indicate changes in the value of the characteristic of the data 
traffic between the two network components. 



58. (PREVIOUSLY PRESENTED) The method of claim 57 wherein the characteristic of the 
data traffic is a number of attempted long-ins. 
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59. (PREVIOUSLY PRESENTED) The method of claim 57 wherein the characteristic of the 
data traffic is an amount of data traffic. 

60. (PREVIOUSLY PRESENTED) The method of claim 57 wherein the extracting selects data 
from the network information files using a filtering expression. 

Allowable Subject Matter 

Claims 1,4-6, 10- 11, 13- 15, 17- 19, 22-24,28-29,31 -33,35-37, 40-42, 46 

- 47, 49 - 5 1 , 53 - 54, and 57 - 60 allowed. 

The following is an examiner's statement of reasons for allowance: 

Prior art either alone or in combination doesn't show or teach "storing records relating to 
said traffic in one or more network information files; 

selecting a characteristic of said traffic for display; 

obtaining a plurality of values of said characteristic of said traffic from said one or more 
network information files for a selected plurality of time intervals within a larger time interval; 
and 

displaying a map of a network topology of said network^ 

presenting said characteristic by playing a rapid succession of graphical images of said 
map of said network topology, each graphical image representing said network as nodes 
connected by lines overlaid on said map, said nodes each representing components in said 
network, said lines representing traffic flow between said components, each graphical image 
graphically representing the value of said characteristic at a particular selected time interval of 
said plurality of time intervals within the larger time interval with a property of at least one line 
of said lines that connect nodes, wherein said property includes a density of said at least one line, 
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wherein a change in said property density of said at least one line that connects nodes in 
successive graphical images of said map of the network topology indicates a change in the value 
of said characteristic of said traffic between said components." in combination with other 
features. 

Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 
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Contact Information 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to SIMON KE whose telephone number is (571)272-4062. The 
examiner can normally be reached on M-Th and Alternate Fridays 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dennis Chow can be reached on (571) 272-7767. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Peng Ke 
/Peng Ke/ 

Primary Examiner, Art Unit 2174 
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